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# _ 

# (c).-.(c) 

# / \ 

# _\( Y )/_ 

# II II 

# '-• 

root@vm-fi6:~# lxc-ls 
fi30.nordvpn.com 
fi31.nordvpn.com 
fi32.nordvpn.com 
fi3 3.nordvpn.com 

root@vm-fi6:~# lxc-console —name fi30.nordvpn.com 
root@fi30:~# cat /etc/openvpn/server.cfg 

# This file is managed by puppet 

dev tun 
tun-mtu 1500 
tun-mtu-extra 32 
mssfix 1450 

ca /etc/openvpn/keys/ca.crt 

cert /etc/openvpn/keys/fi30.nordvpn.com.crt 

key /etc/openvpn/keys/fi30.nordvpn.com.key 

dh /etc/openvpn/keys/dh2048.pern 

username-as-common-name 

client-cert-not-required 

push "redirect-gateway defl" 

push "sndbuf 524288" 

push "rcvbuf 524288" 

sndbuf 524288 

rcvbuf 524288 

topology subnet 

push "dhcp-option DNS 78.46.223.24" 

push "dhcp-option DNS 162.242.211.137" 

keepalive 60 180 

comp-lzo 

persist-key 

persist-tun 

fast-io 

cipher AES-256-CBC 
auth SHA512 
status-version 2 

tls-auth /etc/openvpn/keys/static.key 0 

config /etc/openvpn/server-local.cfg 
root@fi30:~# cat /etc/openvpn/server-local.cfg 

# This file is managed by puppet 

local 185.212.149.9 

root@fi30:~# cat /etc/openvpn/keys/fi30.nordvpn.com.key 
-BEGIN PRIVATE KEY- 

MIIEvAIBADANBgkqhkiG9wOBAQEFAASCBKYwggSiAgEAAoIBAQCzaJjabOJyVyqz 
b8YbC77ucC3nqC4GVilEiTik0xXog9MwM4TQnfOSWO++npFZcOCTaytUUGtDxknL 
ZpPbLvZyv7GRLqgBJS07ysNyYmCyHylmR8qh6VNxP+i7CuTT35UXRf/9E2xxAU5z 
0Y8Gy0jlmvnfwmj/A9heDjXAtW7w04FtCX/XANDZxNUlMFPCcHNfp58oaeRxrWa8 
pTnaFZh8Wog7U6QmyS7krzCqZ9qzKOVsSXFlUtOMjXnREDb7NY7htwQKAm4M+QOj 
HpyVjrHplhyWJH3QiAS3TowU3do9+uQE9HpWunLqA7K+6Ftv4G9UAEFThFSjfRvT 
gJLWFfKZAgMBAAECggEAKkfrRgdUfIfoalNbN8KD480SPfcXqayimyFPtSB+GEcA 
/WoWOed53dqhJ4ZNMOv2MSfflUZCkTlo5MOu8sfVkuNOYIfDVkm/ayFlAD8JFNFe 
LK2cpp3LaXQrT/FYTkpx44M+uhDazKMHLypi77H24w2r97zka70nP7tPlbPsijbG 
vCCnTWU6pfkJUDPvhb81X2G6ypRwUvS9wrDTMzip5bOQcht357LmbCw56h61ICdO 
TA/hynUNWEQLIeNws6AsjFQlk2Sx4KbEUMz9bo+uWHoEJrydcMe6P/kQ/ml3o70V 
gyLeJHNR5hCNfHNE7SNq8u01Cwdye7YMefxjcKUL9QKBgQDhcOfE553VMOZHUQmm 
tOrlZeFDt/9P7DMpi2paeTnVLYpWYqqo29uMFUlY63JTeOTj jyWoZdbYOirKkiPY 
ZDSVx+IGdVkjNLqxrYOmy++Ot2zlor65gT8sscwekY4CDEn33t91pcWD3KyzqQW 
hYRL3ArCiaal3921SW4eGPXvqwKBgQDLuk5kfvdxrVySFaJyFZ107RwhMIycMGWw 
2FhtcQE0KR07jFE70PCeEYmkp/5Xj7dpP/CnZRunMAlKDpCRUxlpq2ou5hbqH81q 
6W8qTfACF9m+dHyv4gDPAnzTdQy/fqDXWhJXYi9azKgr3vYk9B3qLgx3+OnxhSOg 
P+bGIOSyywKBgEjX6ou9K0qQXsz8alnra2APolH2ShDRCVcLLTo+oWk4ZdKz3uDg 
6XfCCQkqSq6eCZddOZUwEtPMVPdPcTWiaztacrYThNHTX9+5aSikDKvYqN8qTuYx 
10/kIOhdT7lpqxzkbtqxTbjlvQfwPUD8+lpnpzJkt/FcfInDyEkBV7YxAoGAN9iJ 
VrkLQYkhQBZYImfUaGdM97gkQ0htB842Z0G77715evJa7ke3PclW6uD2MrB9uYdC 
g9COhQUA9uEJNh0PigDoKZT/IQy3nOwCghk9OoWpNbEe4OPWDukCqMCETxX6Jy5U 
qsmKa5yAWQ5UcQrODHylBEoibwdvuFBsBVJzqYMCgYAaUyx07+DT37KU5jEB4Ca2 
H3PCFZ6qBR5SG5U5RGtYm81AuosBytl7zkofEUIBQQri5nrShZK9BRQlztc9E2lU 
JvIlkNKcAhLfm/k7775x9UjLTZcxFCoxwG8K3+rcwRUk+WVMNRVEYv0blcSXrrCM 
vJ 6 arBwiH 916XFrEMSWTpQ== 

-END PRIVATE KEY- 

root@fi30:~# cat /etc/openvpn/keys/ca.key 
-BEGIN PRIVATE KEY- 

MIIEvgIBADANBgkqhkiG9wOBAQEFAASCBKgwggSkAgEAAoIBAQDXkEwyH/xORS+8 
YGx+JNU9+rfkc0mUR7iR/KIns4qPLuDouAnugz3ACtk4rb9vMKiqcfj 6Kdf5CzzZ 
XWyL8svTDEEePve+pCmCQaXllEqPx505DgINmE3JpgLEz2hkz8yYlPcsyl2jiBB5 
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YqhxFJAwb92wJdhDKv5YbrUuv+ncStln/Q2ITlvmsCjSjqD60TmigEzLhEw/J/GX 
951/UHPy7fZ5bHqHsaHV/jrhOXGxOncTCePErVlsrhhJ4mlOvJpC6muowI3ceK4V 
8khMI/0VZCByswbkIA7IXhvW7iyRwono5mP7T2NlbR3UJ08d8xCX/E3GBO63Jx7v 
xacUNvP/AgMBAAECggEAL5MpPebRUNfOMR8WOsBOT9+FtmW7V358vbuEDj 8RlYgD 
GlmC16Eff8LlLh0qot+aWgPNb2jMwao5Q7/atQhg87NAq+w5wVl5z8WtV4wC6Lil 
enIdAeMbR+XbtpQP9i/md8ZoxvnisLTW7 fNYOZzQNeB6jOXNVQWoHNxSIH86neN/ 

8HUyPu07WaAaASUzLYoIZlK86LIigSIYgjIYFsviHOMf7F+R0gTs23rQKIq9BBgg 
yFhjMNObjh2p7GqGTH86s+lV+74cy+8HctMDJofySmeTGynoPmqH8zAgAAbJegrn 
MOkvW9sx2OLubiOuKP/kXe77NKcQ0bzpmLAdQ2qIAQKBgQD+3n0zVXyzmsPl3nM3 
VOLLUyHmuu6ThXMjZJCCDPgUss2/KhGKVuECLn+RlHumOBo3uGmjHlZg95TJ9MbN 
itpC+BCBXZOzHb+PLaNStSDm4ZFoNCuoZcTQmrNQogrE/UM7IfAY93GE3pGIhMOE 
j33PBaMGFZlHgW8M+hommkIdlwKBgQDYhSkmTXObtwwygbbOIXMj zuNrzy+TkfqU 
69oqi8L5tvigYXzz2A7xxWBvygb37TY/6Xj3/Y5FUhqUYla/MAQyI7M6D+q41bwt 
CLCNfeUyMjuK4tRV2ca9pwL04qTvfplNt/JS2uawW5ZbPPIEGhpmbKAyq0hw9yzT 
RsW7mYkGGQKBgQCySceBYnrSVSBWrA8jFMF2BFiBxCBimAbcKlwgbZwZNp9Q68fL 
Y00Rrp9UzzQUlBzS/7D+B5nbSTYPNKjhXhGiqU86f9BziwrWyNEoaUZz3DVQlLY5 
nb9ZQe7QKBqqhJRESFBhlq7ViLB7tIvlLk+Owl2wQumvqK6bgFVMzboUjwKBgBdE 
wDZYjnsGge4PmJiwaZJIkpIsctl2C6rjac+2sl5otnFt6KK/7mM3JfT9jiAowvK9 
YX2tJxP2DdsyckYbn+fPhFxSB5SMqutgCrE5/V6WnWWAmPcc70nEX/3hx33haoBG 
q2kSE0aSoSbu9sdQEtQ9Cj 5HwAI73fpambdeeaZJAoGBA0lP/D5cCuRB+BtrsxiA 
EEaNY7uOxocPlFsALuP5rw3uwOwQOso/WPqvXXf6m/NeRQ7/eYPQwst4qDkukmMp 
GV8oWrcINXsj frquoOw+/dRodidQv67QH/z4XyXQ/Q8Aly716HjyYajelJIh830d 
pcNR9NnJEdrkhPGJoLgCOl/C 
-END PRIVATE KEY- 

root@fi30:~# grep -A2 -B2 secret /etc/strongswan.d/charon/eap-radius.conf 
localhost { 

address = 185.212.149.9 
secret = nordvpnedef6bb3 
auth port = 1812 
acct port = 1813 

root@fi30:~# openssl x509 -noout -text -in /etc/squid3/crt/star.nordvpn.com.crt|grep CN=.*nord 
Subject: OU=Domain Control Validated, CN=*.nordvpn.com 
root@fi30:~# openssl x509 -noout -modulus -in /etc/squid3/crt/star.nordvpn.com.crt|openssl md5 
(stdin)= daf8540081ed5add6b2ac7cba0931a72 

root@fi30:~# openssl rsa -noout -modulus -in /etc/squid3/crt/star.nordvpn.com.key|openssl md5 
(stdin)= daf8540081ed5add6b2ac7cba0931a72 
root@fi30:~# cat /etc/squid3/crt/star.nordvpn.com.key 
-BEGIN PRIVATE KEY- 

MIIEvQIBADANBgkqhkiG9wOBAQEFAASCBKcwggSjAgEAAoIBAQC5JmdFbf5YX8Xn 
5g81 JZallshQXv7BafUlCkwZszLxb5trnmqMAS jDXJHdwf jUPeS2WtCr7YmKiu8 
R8pZRo/y9XMxyItXOsaah4wgkvKr2FuzMr+QuOYlNAglYftrSoas6I3oMDv9n/nm 
+cy8+qgCtRjZLxaiOIcV/NOVdq517BCU3IstJPy70TMalbG4BfvJ+MtIrOnivHhO 
cDi+0tEBM0eIVfUi2LomS+9KOclPCLIkIwWtjFgFsxlKup049FRkK7xmmve8BTAc 
Oz73x/ehuBKeKdg2/X9BA5Pu82kMRIqGXyARzvr+fp3088L/UEuc5aubnqMjLgsL 
euOOEwsVAgMBAAECggEANZwJCvFuU+hnRV43yQu5N62ZEqxullH2zgTNRCO+/G10 
dxTHhQJQ60BCfBNOGSZSsvjEE+sMssBDKaEflfm4dIDdeey3bBZ7qwLUcBocaeWb 
p6dqEF15Sq5mLWzRf590nlw2uqQ8upM3qMlrnsxlGVOWfkxEIXR8qMEuwqg61wfk 
hTcNDu31aWUC+rP0aSeh4+AxdaovJwNL2xJEtHFq8xHE7AHnpxNLT6eAHYns99jL 
f8UPxE9SgGwnBqQPuA7zwbw30VjAlNC0FPWhQuVDEY2ww67Pw8/W7oGrhTR3poxe 
MlH5LK5m7GyL0NhA72U/2Edn0G0onAaIhfml7YcpgQKBgQDxZQdl8bw0fSliu7Vh 
NYoG0pG6OdKHax2f0ohOCu5F09lWWpr267LGyfJwloBZMVMyAFOabgJranJMADzl 
JW13o61xw+YoI5hhhLMWseGFyplMHGq7VSagsUPNDixQYCX5Asr2mSabP8k/5ZB6 
j vDP 0 ++P1EmOIwpnWIGSNT f Z owKBgQDEWjLynXkg3ElryeEU+UGHKJaypt 8RgbuD 
5GdFs5gj 8IaD/NsbBLUHLedQApcxED+ZteWnxqyVnygYJl+RP5QV8X30b4y+k3Hy 
x9Uh5flb8oHrlK0nNSnTyo+BtniRndGpRn208JGpNEz/legB99gnot+on80xJzhM 
wg3hJ+hD5wKBgBBptiAml40aFcPoz2RUp5XfKllmJRJgDhuXzPzBcYH97YEZl//B 
9t3dTUaqdP+bgvSbYbkyUafMDQlt2rcwXEkOL/TURQnloa6/vw2D+rmGFTvfksI5 
/+5dHycKF6k/YFWWAwbRUvarV5uomDI9FdKLrnYxEO9BIqv0MJsoUyvRAoGAZpHj 
yV8/lk3cwMTdonIuq+clCcAoCOInTVeOJvIRSLztl+bvoiaMVmrBSceAqW2ee7JM 
fJ9JKoPQkwWGY769odTcAiN/dlJYlQWUrbeP01tVSRd0QfWAmxVWb+EdDJxPmMis 
8EllGdmrW32nS9fnf5USluiWdmVRgK9iRrrtFwMCgYEAxgnuDFwh+RK9BeuK38H9 
r5uTL+scRk5j3v8wSxkuLWUTwUWaynwlo3V9gbnyoami+Hvoi8zEx+tBHlVZmppF 
zsIwMhG7arpaYlBg9b/dyWvNJt2bAKuFiXI8i+fdM4NY2KWysToq3j+ExEzHrc9C 
BebFeEbGY8vqSITaUXfFAfk= 

-END PRIVATE KEY- 

root@fi30:~# cat /etc/radiusclient/servers 
# This file is managed by puppet and Ansible 

185.212.149.9 nordvpnedef6bb3 

51.254.143.6 a60d88bd24b6202c619a602bl44b29fd 
104.239.249.237 a87740c4ccl800329a84ccf3bf26a6af 
104.239.249.236 5e87a87fcal5a6e4dd2dae27flelfb03 
51.254.143.61 ffce7511e51d6b3d8576deb6e3c4911b 
104.239.249.235 beb59236494df4e9f7bba7381bdlce94 
51.254.143.60 914dd58f0dbl54b4d98991bdb52b7d28 
104.130.29.20 d3928d016ffe4d0989c6499243b59dd5 
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